Black Basta Ransomware Blitz: Over 500 Organizations Breached Globally!

Hot Take:

While the digital world enjoyed a brief lull in ransomware catastrophes, the Black Basta group emerged from the shadows of the disbanded Conti, proving that like bad sitcoms and zombies, some threats just refuse to stay dead. On the flip side, Inc Ransomware seems to be holding a garage sale for its source code—because nothing says “startup spirit” like a cybercriminal fire sale!

• Black Basta ransomware, a brainchild of former Conti members, has reportedly compromised over 500 organizations globally since its inception in April 2022.
• The CISA report on Black Basta likely followed the group’s attack on Ascension Healthcare, causing significant disruptions.
• Inc Ransomware attempted to sell its source code for $300,000, raising questions about the operation’s future.
• Phorpiex botnet has been busy distributing LockBit Black ransomware via phishing emails, leveraging leaked LockBit source code.
• Australia’s MediSecure experienced a “large-scale” ransomware breach, leading to a complete shutdown of its IT systems.

Need to know more?

Black Basta – Not Your Average Office Drama

Just when you thought it was safe to go back into the cyber waters, Black Basta emerges, dripping with the remnants of the infamous Conti ransomware group. With over 500 organizations under its belt, this group isn’t just dipping toes in the water—they’re diving in headfirst. It’s like watching a supervillain team-up in a movie, except you might actually be in the movie.

The Curious Case of the Ransomware Yard Sale

Meanwhile, Inc Ransomware is apparently trying to declutter its digital life by selling its source code. At $300,000, it’s either a steal or a desperate move by a group reconsidering its life choices. This could be the cyber equivalent of a lemonade stand, but with more encryption and less lemon.

A Phishing Expedition with Phorpiex

Not to be outdone, the Phorpiex botnet has been casting wide nets with millions of phishing emails leading to LockBit Black infections. It seems even old botnets can learn new tricks, especially when they stumble upon some leaked ransomware source code. It’s like finding a recipe for disaster and deciding to make a triple batch.

When IT Systems Go Silent

Down Under, MediSecure decided to go full hermit crab and shut itself in after a “large-scale” ransomware attack. It’s a harsh reminder that sometimes, the “secure” in MediSecure is more aspirational than factual. Their IT systems and phones took a little ransomware-induced nap, disrupting services and probably causing more than a few headaches.

Something Old, Something New, Something Borrowed, Something Black Basta

As we wrap up, it’s clear that the more things change in the world of ransomware, the more they stay alarmingly the same. Black Basta’s rise from Conti’s ashes shows that these threats evolve and adapt, much like a bad flu season. And just like flu season, it’s better to be prepared than sorry—so maybe keep those digital immune systems in check!

That’s it for this week in the ransomware roundup. Stay safe, stay secure, and maybe don’t open that sketchy email from your long-lost uncle promising you a fortune. Until next time, cyber folks!